It seems like agentic browsers will develop aa new set of core primitives (e.g. always ask for manual approval when spending money), and this flavor of security vulnerability will go away.
Web browsers didn't begin with the same levels of security they have now.